Error: rpki.afrinic.net/repository/member_repository/F367D0C5/4D5FB986A48911ED90607E87F1222468/bBegDOel7ptwctoLjNYoITB00AE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367D0C5/4D5FB986A48911ED90607E87F1222468/bBegDOel7ptwctoLjNYoITB00AE.mft
File:                     bBegDOel7ptwctoLjNYoITB00AE.mft (raw, json)
Hash identifier:          SKq1X1Cvzw3Xni1HaVPWKAHIaVWwLzaSV50UUbaDkJU=
Subject key identifier:   42:28:ED:86:1C:95:45:63:D2:F5:93:1E:C1:CC:03:D9:17:2C:8F:11
Authority key identifier: 6C:17:A0:0C:E7:A5:EE:9B:70:72:DA:0B:8C:D6:28:21:30:74:D0:01
Certificate issuer:       /CN=F367D0C5AR/serialNumber=6C17A00CE7A5EE9B7072DA0B8CD628213074D001
Certificate serial:       055B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/bBegDOel7ptwctoLjNYoITB00AE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367D0C5/4D5FB986A48911ED90607E87F1222468/bBegDOel7ptwctoLjNYoITB00AE.mft
Manifest number:          0558
Signing time:             Tue 22 Sep 2026 03:12:59 +0000
Manifest this update:     Tue 22 Sep 2026 03:12:58 +0000
Manifest next update:     Thu 24 Sep 2026 03:12:58 +0000
Files and hashes:         1: bBegDOel7ptwctoLjNYoITB00AE.crl (hash: 5yE+zTgztyVcbJ0WL2yFNSP2lnVDsdpX1o7fIixEvDU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367D0C5/4D5FB986A48911ED90607E87F1222468/bBegDOel7ptwctoLjNYoITB00AE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367D0C5/4D5FB986A48911ED90607E87F1222468/bBegDOel7ptwctoLjNYoITB00AE.mft
                          rsync://rpki.afrinic.net/repository/arin/bBegDOel7ptwctoLjNYoITB00AE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1371 (0x55b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367D0C5AR, serialNumber=6C17A00CE7A5EE9B7072DA0B8CD628213074D001
        Validity
            Not Before: Sep 22 03:12:58 2026 GMT
            Not After : Sep 24 03:12:58 2026 GMT
        Subject: CN=6ab1f23a-4f1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:05:1a:01:db:4c:91:bd:b1:83:fa:e9:6c:ec:
                    34:35:43:57:0c:cf:9a:42:53:a4:39:3e:e9:c2:41:
                    2f:08:a5:6f:b3:fe:d8:94:ae:b8:85:7f:56:c8:2c:
                    0f:94:f5:e4:aa:5a:e8:66:aa:8e:35:0e:59:5b:35:
                    e4:4c:74:24:d5:a2:e6:e4:9f:ea:55:c5:3d:62:f4:
                    41:bb:18:f9:7a:65:95:55:7e:64:ca:c8:b2:1b:69:
                    57:7c:80:0e:72:84:52:6f:73:a9:6e:4e:d0:7a:09:
                    5a:17:4f:13:5f:88:0f:15:81:12:06:55:f7:87:fe:
                    fd:19:e8:35:0b:80:d4:88:47:12:2a:52:3e:a1:b8:
                    a1:f0:e8:11:2a:f1:e6:45:d8:bc:d4:05:86:de:a7:
                    1b:0b:c3:ad:3e:bb:32:bf:90:63:94:72:13:dd:3d:
                    2f:60:e5:f1:66:ff:4b:95:14:18:e5:86:c8:48:2a:
                    75:57:ed:fb:99:d3:ac:64:8d:22:0a:a4:b8:4c:43:
                    23:0b:7f:4f:38:f6:97:6b:45:91:a3:0d:36:9b:06:
                    07:55:bb:45:96:b5:1f:39:1c:39:3c:2b:b8:b4:87:
                    a1:95:e9:cc:09:d6:4c:88:70:18:fc:df:15:04:eb:
                    13:e8:03:48:65:e0:2e:3c:27:0a:62:90:aa:a6:a8:
                    5f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:28:ED:86:1C:95:45:63:D2:F5:93:1E:C1:CC:03:D9:17:2C:8F:11
            X509v3 Authority Key Identifier:
                keyid:6C:17:A0:0C:E7:A5:EE:9B:70:72:DA:0B:8C:D6:28:21:30:74:D0:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367D0C5/4D5FB986A48911ED90607E87F1222468/bBegDOel7ptwctoLjNYoITB00AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/bBegDOel7ptwctoLjNYoITB00AE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367D0C5/4D5FB986A48911ED90607E87F1222468/bBegDOel7ptwctoLjNYoITB00AE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:2c:da:2f:b5:77:b2:a3:a3:ac:17:c9:2f:22:c0:1d:9d:f5:
         c4:fa:44:8e:1b:9e:a9:3f:43:14:fa:b2:b5:61:4c:cb:48:e8:
         a0:9e:8a:39:4e:5d:71:0a:93:6a:4f:bb:a0:da:ab:9e:e8:54:
         6f:ad:ef:98:2a:e4:35:0a:57:04:7c:33:8d:6a:2c:83:a9:f2:
         8d:6f:8b:fd:3d:ae:0c:69:63:38:00:1c:4e:63:30:f4:ee:cb:
         4e:14:30:39:f0:b8:b0:3c:f4:42:88:d7:b1:cb:8f:57:57:7b:
         9a:bd:fa:62:3a:ad:5f:4a:ea:75:99:a2:b8:41:05:d0:fc:80:
         a1:a8:18:ad:c1:21:69:c2:e3:79:2c:a3:8b:9b:de:35:86:19:
         03:48:e5:fc:4e:b5:f7:99:e4:26:f3:cd:bc:0a:03:db:f7:6c:
         f4:89:54:dc:2e:0c:cb:ec:a8:ce:ca:51:3b:8e:90:33:b0:ad:
         d4:62:db:99:f2:4f:5e:94:64:33:d4:94:8c:6d:f8:02:a9:b3:
         84:c1:92:bb:4c:14:ab:91:84:64:b1:f1:a1:c4:28:91:f7:d6:
         c5:c5:71:9e:bc:00:9d:e1:2d:f2:91:db:35:ca:a8:ba:6a:e0:
         34:4d:94:d4:f3:3d:9f:e8:8a:7a:32:a0:88:ac:f2:4f:70:0a:
         fc:ee:21:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:36:43 2026 by rpki-client